Feedback

Feedback

Did this article resolve your question/issue?

   

Article

Authentication settings for the ODBC DB2 driver

Printable View

Information

 
TitleAuthentication settings for the ODBC DB2 driver
URL NameAre-the-user-and-password-send-in-clear-text-with-the-ODBC-DB2-driver
Article Number000193199
EnvironmentProduct: Connect for ODBC DB2 Wire Protocol driver
Version: 7.1
OS: all supported platforms
Database: DB2
Application: all supported applications
Question/Problem Description
Are the user and password send in clear text with the ODBC DB2 driver?
Steps to Reproduce
Clarifying Information
Error Message
Defect Number
Enhancement Number
Cause
Resolution
How the user and password are sent depends on the value set for the Authentication Method option:

- If set to 0 (No Encryption), the driver sends the user ID and password in clear text to the server for authentication.
- If set to 1 (Encrypt Password), the driver sends the user ID in clear text and an encrypted password to the server for authentication.
- If set to 2 (Encrypt UID and Password), the driver sends an encrypted user ID and password to the server for authentication.
- If set to 3 (Client Authentication), the driver uses client authentication when establishing a connection. The database server relies on the client to authenticate the user and does not provide additional authentication.
- If set to 4 (Kerberos Authentication), the driver uses Kerberos authentication. This method supports both Windows Active Directory Kerberos and MIT Kerberos environments.
- If set to 7 (Encrypted Password AES), the driver encrypts the password with 256-bit AES encryption in the connection request. (DB2 V9.7 and higher only.)
- If set to 8 (Encrypted UID and Password AES), the driver encrypts the user id and password with 256-bit AES encryption in the connection request. (DB2 V9.7 and higher only.)
Workaround
Notes
Last Modified Date4/17/2017 1:48 PM
Files
Disclaimer The origins of the information on this site may be internal or external to Progress Software Corporation (“Progress”). Progress Software Corporation makes all reasonable efforts to verify this information. However, the information provided is for your information only. Progress Software Corporation makes no explicit or implied claims to the validity of this information.

Any sample code provided on this site is not supported under any Progress support program or service. The sample code is provided on an "AS IS" basis. Progress makes no warranties, express or implied, and disclaims all implied warranties including, without limitation, the implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample code is borne by the user. In no event shall Progress, its employees, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample code, even if Progress has been advised of the possibility of such damages.


Copyright © 2022 Progress Software Corporation and/or its subsidiaries or affiliates.
All Rights Reserved.

Progress, Telerik, Ipswitch, Chef, Kemp, Flowmon and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries. See Trademarks for appropriate markings.

Terms of Use Privacy Center Security Center Trademarks License Agreements Code of Conduct Careers Offices
Do Not Sell My Personal Information